2011-06-21 08:17:28

by Mkrtchyan, Tigran

[permalink] [raw]
Subject: missing verifier in rpcsec_gss calls

this is what I am observing with v4.0 and v4.1.
sometimes, mostly on RPCSEC_GSS_DESTROY,
in the PC calls missing verifier. This is against my
server and linux server.

Packets attached. Please have a look at the packet 15.
100% reproducible.


I tried vanilla 2.6.39 and 3.0.0-rc3 from
git://linux-nfs.org/~trondmy/nfs-2.6.git
9cff1ffd4d477f541d5644f0ec25ee40025fa806 origin/linux-next

Regards,
Tigran.


Attachments:
mount-krb5i.dump (3.23 kB)

2011-06-21 17:56:57

by J. Bruce Fields

[permalink] [raw]
Subject: Re: missing verifier in rpcsec_gss calls

On Tue, Jun 21, 2011 at 10:17:07AM +0200, Tigran Mkrtchyan wrote:
> this is what I am observing with v4.0 and v4.1.
> sometimes, mostly on RPCSEC_GSS_DESTROY,
> in the PC calls missing verifier. This is against my
> server and linux server.
>
> Packets attached. Please have a look at the packet 15.
> 100% reproducible.
>
>
> I tried vanilla 2.6.39 and 3.0.0-rc3 from
> git://linux-nfs.org/~trondmy/nfs-2.6.git
> 9cff1ffd4d477f541d5644f0ec25ee40025fa806 origin/linux-next

Looking at the code quickly:

The only place I see gss headers encoded is in gss_marshal(), which
unconditionally encodes the verifier.

So the length must be getting messed up after that?

I don't see it....

--b.